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swer to the user's query. The answer is formatted as ap- 
propriate and returned to the user as an instant message 
or via another route specified by the user. A method and 
system of providing authenticated access to a given web 
page via instant messaging is also disclosed. 
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METHOD AND SYSTEM FOR INTERACTIVELY RESPONDING 
TO INSTANT MESSAGING REQUESTS 



10 



FIELD OF THE INVENTION 



This invention is directed to a method and system for autonomously 



processing requests from remotely located users. More particularly, this invention 
is directed to a method and system for acting on requests and queries received from 
rvemotely located users using an instant messaging protocol. 



available web browsing software to search for desired information. The web 
browser software permits users to access various automated search engines and, by 

20 entering appropriate queries, identify web pages which may contain the information 
of interest. While a wide variety of information is available in this manner, most 
web pages are directed to specific types of information. As a result, users who are 
seeking information in various diverse topics will often need to locate and access 
multiple, and perhaps unrelated, web pages. While users can find a great deal of in- 

25 depth information regarding particular topics, it can often be very difficult to obtain 
answers to short and specific questions due to the overwhelming number of web 



15 



BACKGROUND OF THE INVENTION: 



Internet users are well versed in accessing the Internet using widely 
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pages which will be identified in conventional indexing and search engine-based 
systems. 

Various efforts have been made to aggregate diverse information onto 
one or a few web pages. However, these aggregated sites are often maintained by 
5 individual users as "personal web pages" and are thus of questionable reliability. 
Although some commercial web sites have been implemented for the purpose of 
aggregating information, these sites generally compete among each other for users 
and thus include many graphical features and expanded functionality to increase the 
site's attractiveness. However, this additional functionality also makes these sites 

10 more cumbersome and slow to access and use because of the additional data and 
processing overhead. 

Another widely used Internet application is instant messaging ("IM"). 
IM services of one form or another are in use by an estimated 70 million people or 
more. Unlike Internet browsing software, which is used to access various web 

15 pages, IM is primarily used by a subscriber to "chat" with one or more other IM 
users. To access an IM service, a user registers with a service provider and, after 
connecting to the Internet (or other appropriate data network), enter their screen 
name and password to log in to the IM network. Popular IM applications include 
AOL's Instant Messenger and Microsoft's Network Messenger services. Once a 

20 user has logged in to the appropriate IM network, his presence on the system is 

made known to all authorized partners (commonly termed "buddies"). The user can 
then engage in typed conversations with other IM users connected to the system. 

Because IM is a text-based service, instant messaging communication 
is generally not burdened by the need to transfer large graphic, sound, or program 
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files. As a result, instant messaging is a relatively quick and easy to use system. 
However, while instant messaging is widely available, its value as a means to access 
and retrieve data from a remotely located automated system has not been fully 
appreciated. Accordingly, it is an object of the invention to provide a instant 
5 messaging based system which interactively responds to and services requests from 
a remotely located users. Such requests can include queries for general or specific 
information, requests to access and control various "WEB-enabled" devices, 
requests to store or information for later use, reminder and paging services, as well 
as additional request-based functionality, such as suitable for use in various e- 

10 commerce environments. 

Users of IM services often simultaneously use Internet browsers to 
access web pages. It is not uncommon for an EM user to forward a link to a web 
page of interest via the IM service to another user. However, if the indicated web 
page contains sensitive information, a user subsequently following the link to access 

15 the web page may be required to enter a username and password. Even though the 
user has already signed in to the IM service, and thus is already authenticated, the 
accessed web site generally has no knowledge of this authentication. 

It is thus a further object of the invention to provide a method and 
system for granting authenticated access to a web page which leverages the 

20 authentication mechanism present in a concurrently operating IM service. Such a 
secured access system is suitable for use in an IM-based request servicing system to 
enable authenticated access to user profile web pages where a user can easily enter 
or retrieve large volumes of information, fill out forms, or engage in other activities 
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which can be cumbersome at best when implemented in an instant messaging 
environment. 

SUMMARY OF THE INVENTION 

5 These and other objects are achieved through the use of a method and 

system for interactively responding to requests sent as instant messages from a user. 
The system includes a message server which is connected to a data network through 
an instant messaging port. The server is logged in to the IM network and assigned a 
designated screen-name, such as " ACTIVEBUDDY" . When the message server 

10 receives an IM message from a user, the message is processed to determine the type 
of request made by the user and the appropriate actions necessary to service the 
request. In one embodiment, the request is an informational query. In response to 
such a request, the message server directs the query to an appropriate query 
response server, which server will interpret the request and return a suitable answer. 

15 The query response server(s) can be local to the message processing server or 
remotely accessed, e.g., via the Internet. The received answer is embedded in a 
message which is returned to the user, preferably over the IM system. 
Alternatively, the message server can interpret the request directly using various 
natural language processing techniques known to those skilled in the art. In one 

20 configuration, a table of query patterns is provided and the table is searched to 

identify the pattern which most closely matches the received request. A designated 
local or remotely located resource is then accessed to determine an answer for the 
query, which answer is returned to the user. 

It will be appreciated that, in order to generate an accurate answer to 
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many types of queries, additional or secondary information may be required to fill 
in unstated assumptions in the query. To aid in providing this information, a user 
profile can be maintained by the system in which commonly needed information is 
stored. The types of information suitable for placement in the profile include static 
5 data such as the user's birth date, place of residence, fairly static information, such 
as stock portfolio data, and dynamic information, such as information gleaned from 
the prior most recent communications with the user. When the system determines 
that additional information is required, either by processing the request directly or 
in response to a message forwarded by a query response system indicating that more 
10 data is needed to process the request, the information is retrieved from the profile. 



user's profile and cannot be reasonably determined through other intermediate data 
searches, the user can be solicited to provide the additional information. Such 
solicitation can be through a query message sent to the user over the IM network or 

15 by means of a message instructing the user to access and update their profile via a 
designated web site. After the additional data is received from the user, the original 
query is reprocessed with the additional data and the result is returned to the user. 
The additional data can be stored in the user's profile for use in the future. In 
addition, information extracted from a prior request or provided in an answer can 

20 also be stored in the user profile for at least a predetermined period of time to 

permit the user to ask a series of questions or make a series of request related to a 
particular item without having to specify the same item in every request. For 
example, a user can issue a query asking the local time in New York City. In a 
following query, the user can simply ask "What is the weather today?" The object 



If the needed additional information is not already present in the 
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of the first request (New York) is used to process the second request. Processing 
and reusing data in this way makes the resulting text dialog appear more natural and 
simplifies use of the system. 

During the course of one or more requests, it may become necessary 
5 to ask a user to enter a large amount of information or take another action which is 
easier to perform in an Internet browser environment. According to a further aspect 
of the invention, a method and system is also provided to allow authenticated access 
to a particular web page by directing the user to that page using a link which is 
provided in an instant message. When a user is to be given authenticated accessed 
10 to a web page, the system generates an access key, which can be, for example, a 
random number of a suitable length. A uniform resource locator ("URL") is then 
generated which includes the key and which is associated with the selected web 
page. 

The key-containing URL is forwarded to the user in a message using 
15 the instant messaging protocol. When the user receives the message, the user can 
click on (or otherwise select) the URL to activate their web browser and direct it to 
the designated location. When the system receives a request for access to a web 
page, the specified URL is parsed to extract an embedded key. This key is then 
used to identify the particular web page to which the user has been granted access 
20 and the web page is served to the user. To increase security of the system, the 

various keys can expire after a short period of time and also after they are used once 
to access a web page. Advantageously, this technique leverages the authentication 
mechanism of the instant messaging system by granting access to the designated web 
pages only to users who have successfully logged in to an instant messaging service. 
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As a result, the user does not need to divulge their IM password or remember 
another user ID and password combination. In addition, because the web page/key 
association expires after a single use and in a designated period of time in any case, 
it is highly unlikely that the key could be intercepted and used by an unauthorized 
5 party during its validity period and without detection. 



BRIEF DESCRIPTION OF THE DRAWINGS : 

The foregoing and other features of the present invention will be 
more readily apparent from the following detailed description and drawings of the 
10 illustrative embodiments of the invention in which: 

Fig. 1 shows a high level block diagram of a first embodiment of a 
system implementing various aspects of the invention; 

Fig, 2 is a block diagram of a second embodiment of a system 
implementing various aspects of the present invention; 
15 Fig. 3 is a block of a message routing system for use in the present 

invention; 

Fig. 4 is a flow chart of various aspects of the operation of a message 
processor for use in the systems of Figs. 1 and 2; 

Fig. 5 is a flow chart illustrating one technique of interpreting 
20 requests received from a user; 

Fig. 6 is a flow chart illustrating a method of providing authenticated 
access to a web page via an instant messaging link; and 

Fig. 7 is a diagram of a system implementing the technique illustrated 

in Fig. 6. 
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DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS: 



Turning to Fig. 1 there is shown a block diagram of a system 10 for 



interactively responding to requests or queries from a remotely located user. The 
system comprises a message router 11 which includes message processor 12. 
5 Processor 12 is coupled to a data network 14 and is logged in as a user of an instant 
messaging service provider 17 through an appropriate IM application or routine 16. 
A user 18 is connected to the network 14 and the IM service provider 17 through an 
instant messaging gateway 20. The instant messaging gateway 20 will typically be 
provided by an IM service provider to which the user has subscribed and allows 

10 access to the IM system after the user has logged in. The IM application 16 

between message processor 12 and the network 14 is configured to enable access to 
the appropriate IM service provider(s). To provide instant messaging 
communication between message processor 12 and a plurality of users, which users 
may subscribe to different instant messaging providers, it may be necessary for 

15 message processor 12 to connect to a number of different EM service providers 17 
through different gateways 16 or via a single IM protocol gateway 16 with several 
I/O processing routines to address situations where various messaging service 
providers do not share a data common protocol. 



20 unique screen name which is included as part of a message sent from the user to a 
designated destination. To direct a query or other request to messaging processor 
12, a user, after logging sends an instant message containing the request to the 
screen name assigned to the message processor 12, such as "ACITVEBUDDY. " 
The message processor 12 is logged into the IM system and the IM system directs 



In an instant messaging environment, each user is provided with a 
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the message through the network to the processor 12. 

When message processor 12 receives a request from the user, the 
screen name of the user is stored and, in this embodiment, the request, is forwarded 
to a local or remotely located query response server 22. In practice, query response 
5 server 22 will include a natural language interpreter or other smart system which is 
capable of responding to queries and other request of an arbitrary nature related to 
topics within at least a specified range of issues by generating an appropriate 
answer. The answer generated by query response server 22 is returned to the 
message processor 12 where it is incorporated into an output message which is 
10 subsequently sent to the user through the IM network. Alternatively, or in addition, 
the output message can be forwarded to the user through any other designated 
means, including e-mail, fax, text messaging to wireless or hand-held devices, voice 
mail (via a text to speech output system), or any other type of messaging system 
specified by the user. 

15 Various types of information received during the query response 

interaction can be stored for later use in a user profile database 24 which contain 
various user profiles associated which each user. The profiles can be keyed to a 
user screen name in combination with the name of the instant messaging provider, 
for example "john@aor. The profile database 24 is preferably maintained on a 

20 separate server which is accessible to both message processor 12 and query response 
server 22, although other data storage configuration are feasible. By storing data 
provided by the user during a profile set up session and/or in response to data 
solicitation requests, a sophisticated query system can be provided which can make 
use of secondary or implied information to return a response which is more accurate 
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or based on implicit data which need not be entered by the user in each query. 

For example, a user may issue a query "What is the weather in 
Sunnyvale?" The query response server would process this query, determine the 
most likely "Sunnyvale" based on available information about the user, and access 
5 a suitable Internet weather resource to obtain the weather report for, e.g. , 

Sunnyvale, California. In addition, the user's profile can be dynamically updated 
with the location Sunnyvale. As a result, a default location (if one was not already 
present) is available for use in subsequent location-dependent queries where the user 
does not specify a location. For example, the user may subsequently issue the query 

10 "Are there any outdoor concerts today?". In order to accurately answer this 

question, the query response server 22 must know a general geographic location. In 
this embodiment, the system could use the most recently mentioned geographic 
location, Sunnyvale, as the location for the search. 

It will be appreciated that a large amount of default information can 

15 be provided in the user profile, such as a user age, or birth date, sex, place of 

residence, athletic teams of interest, stock portfolio information, etc. Because of the 
large quantity of information which can potentially be stored in the user profile, 
when a query from a user without a profile is detected, a "new user" procedure can 
be initiated in which the user is requested to provide various types of information to 

20 be stored in the user profile. In one embodiment, the user is directed to a specified 
profile web page in to which they can enter the various types of requested data. A 
most preferred method of directing the user to a web page is discussed in more 
detail below. In a more preferred embodiment, a user's profile is dynamically 
generated using information which is extracted from communications with the user, 
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such as user-initiated queries. 

Turning to Fig. 2 there is shown a block diagram of a system 10' 
according to a second embodiment of the invention. This embodiment is generally 
similar to the embodiment of Fig. 1 in that a message router 29 is provided which 
5 includes a message server 30 for responding to user's requests and which is 

connected to IM service 17 through a gateway 16. One primary difference is that 
the functionality of a separate query response server 22 of Fig. 1 is included within 
a local message server 30 such query processing is not outsourced as a matter of 
course. Message server 30 is connected to the profile database 24 and also to a 

10 series of remote and local data resources 32, 34. In addition, server 30 can be 

configured to access network 14 using multiple data protocols in addition to an IM 
protocol, and in particular, a hyper-text transfer protocol ("HTTP") link via web 
server 36, which protocol is the dominant form of data messaging used by Internet 
web browsers. Also shown in Fig. 2 is a similar web browser interface 38 available 

15 to user 18. 

As discussed more fully below relative to the flow chart of Fig. 4, 
message server 30 interprets a message containing a query or other request received 
from the user over the IM gateway 16 and accesses the appropriate data resource to 
fulfill the request. The type of data resource accessed depends on the information 
20 needed or the action requested. For example, various types of static information 

may be locally stored. Information of this type can include, for example, a zip code 
and area code look up databases, measurement conversions, and various geographic 
databases, such as a mapping or direction system, A local partially or fully cached 
version of a remote database can also be provided. Data suitable for storage in a 
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local cached copy of a remote database includes information which changes 
relatively infrequently, and thus would only need to be updated on a periodic basis, 
not continuously. Examples of data of this type include geographic and political 
information and entertainment history. For data which is continuously updated, the 
5 server is preferably connected to remote data resources through, for example, the 
Internet, to allow retrieval of up-to-date information. Data which is best suited for 
retrieval from such remote resources includes package tracking, stock prices, airline 
flight status, and weather. As will be recognized, the remote data resources may 
have different access protocols. Thus, a number of different access application 

10 programs may be required in order to properly format an appropriate query to the 
resource and properly process the received reply. In one particular embodiment, 
the message server 30 processes a received request at least sufficiently to identify 
the appropriate data resource to query and formats the data access request 
accordingly. As will be recognized by those of skill in the art, various intermediate 

15 levels of request interpretation, query generation and processing, etc., can also be 
performed. 

In operation, a large number of requests or queries can be pending 
for many users at the same time. Thus a larger number of separate "conversations" 
may be ongoing. In order to increase the system response time and decrease the 
20 load on any particular server, preferably the incoming and outgoing instant 

messaging data stream is handled by a message router and forwarded to a plurality 
of servers 30. 1 through 30. N as illustrated in Fig. 3. In one embodiment, the 
message dispatcher 40 maintains a table 42 of active users associated with each 
server (a user-server association table). When a message is received from a user not 




WO 02/17101 PCT/US01/23086 

13 

currently in the user-server table 42, that user is assigned to a server and placed in 
the user-server table, e.g. , on a lowest load basis such that the server wtih the 
lowest number of active users is assigned the new users. Then, as data packets are 
received from the user through the instant messaging gateway 16, the data packets 
5 are processed by the message dispatcher 40 and routed to an appropriate server 
according to the user-server association table 42. 

Advantageously, such a message dispatching system can be 
configured so that each server 30.x believes itself to be the only server in the system 
and is unaware of the mtervening message router 40. In addition, the system can be 

10 configured so that the entire system or server 30. 1 through 30.N appears to a user 
under the single screen name used by the system 10 (or 10'). This arrangement 
simplifies the addition of and removal of servers 30.x to the system without 
substantial reconfiguration being required. Various techniques for configuring a 
message router 40 will be known to those of skilled in the art. Preferably, the 

15 dispatcher 40 and user-server association table 42 are controlled with a suitable load 
balancing algorithm to evenly distribute the request load across the available server 
base in response to varying usage conditions. 

Fig. 4 is a flow chart showing the general operation of a message 
processor server 30, such as shown in Fig. 2. While this flow will be discussed 

20 with reference to the architecture shown in Fig. 2, many aspects of this technique 
are also applicable to controlling the message processor 12 and separate query 
response server 22 illustrated in Fig. 1. Turning to Fig. 4, the server waits to 
receive a query, request, or other communication from a user (step 50). A screen 
name or other ID associated with a received query is determined and a check is 
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made to see if a user profile has already been associated with the user (step 52). If 
no profile is found (i.e., the communication is from a new user), a user profile 
record is created and stored in the profile database 24 (step 54). The received query 
is then interpreted and acted upon. 
5 In a particular embodiment, the query is interpreted by comparing it 

to a list of predefined query patterns and identifying the pattern which most closely 
matches the received query. Once the query pattern is determined, the appropriate 
action is taken to answer the query or otherwise fulfill the request (step 58). As will 
be appreciated, certain queries may require secondary or additional information. 

10 This information may be present in the user profile. Accordingly, the user profile 
information is preferably made available to, and can be referenced by, the system 
which is interpreting and/or acting on an interpreted query or request. 

Fig. 4 illustrates four basic types of requests which can be received 
and acted upon. These types are exemplary in nature and it will be appreciated that 

15 other types of requests in different classifications can also be handled by adjusting 
the present system and method as required. 

A first type of query is what can be considered to be an "answerable" 
query. In other words, this type of query can be answered without additional input 
from the user (although access to data in the user profile or another secondary 

20 source may be required). Following receipt of an answerable query (step 60) a data 
retrieval request is formulated as required for the appropriate data resource (step 
62). If the data resource is local, the data resource is directly accessed as 
appropriate using the formulated request. If the data resource is remotely located, 
the resource request is formatted as required for the given resource and forwarded 
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through an appropriate communication link, such as the Internet (step 64). After the 
answer is received or extracted from the data resource, an answer message is 
generated and configured to sent the user as output. (Step 66). The user profile can 
also be updated, as appropriate, in accordance with any new or updated information 
5 garnered from the interaction. 



providers which support incompatible display options, a presentation layer is 
preferably provided for adjusting the format of output messages in accordance with 
knowledge of the data formatting requirements for the user's particular IM service 

10 provider. In one embodiment, the presentation layer consists of a script processing 
mechanism somewhat similar to script processing provided by the XML language. 
Each message processed by the message server is initially formatted to include all 
formatting options for all supported IM systems. For example, the initial output 
message can contain both bold text and embedded URLs even though, e.g, one IM 

15 system supports bold text but not embedded links, while a second IM system 
supports embedded links but not bold text. During the output processing, the 
presentation layer detennines the target EM system and its supported capabilities 
and/or formatting requirements. The unsupported or excess formatting is removed 
and the remaining message is adjusted, as needed, to be in a format suitable for the 

20 target IM system. 



forwarded to the user through the IM gateway 16 (step 70). Alternatively, or in 
addition, the output can be directed to an additional or different address or device 
specified by the user, either in the particular received query, in a prior query, or as 



Because various users may be connected to the system through IM 



The output message, properly formatted as required, is then 
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a field in the user profile. 

Certain queries received by the user will not be answerable without 
additional data. For example, a user may submit a query inquiring about "the 
weather" without specifying a geographic area. In the event that such a query is 
5 received, a deterrnination is made regarding the type of data which is missing and 
(provided the information is not already in the user's profile) a question message 
soliciting this information from the user is generated (steps 72, 74). 

In one embodiment, a separate subroutine is initiated during which 
the system assumes that the next communication from the user will be a response to 

10 the query message and the data in the response will be stored and used as 

appropriate. (Not shown). Preferably, however, the particular answer pattern 
associated with the generated questions is added as a temporary pattern to the query 
list and is associated with the particular user (step 76). The more-data-needed query 
can also stored in the user profile for later use. In this manner, and as discussed 

15 further below, a response to the generated question can be detected without 

requiring additional and separate data processing routines which limit the responsive 
actions which can be taken by the user. Finally, the question message is configured 
as output to the user (step 78) and forwarded through the output presentation layer 
and the IM gateway (steps 68, 70). 

20 Preferably, answer patterns are added as temporary query patterns 

and expire within a designated period of time. Thus, a process can be initiated on a 
periodic basis to remove expired patterns from the pattern list (step 59). In 
addition, temporary patterns associated with a given user are also preferably 
removed when a subsequent communication from that user is received, regardless of 
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whether the communication matches the query or not. This allows a user to 
abandon a query which requires more data and simply issue a new query (which will 
not match the temporary pattern). 

By storing an answer pattern as a temporary pattern at the beginning of 
5 the query pattern list, the system can easily and quickly identify user communications 
which are responses to a data needed question. When a response matches an answer 
pattern (step 80) the information returned by the user is extracted and added to the 
appropriate fields in the user profile (step 82). The original user query which spawned 
the "more data needed question" is then retrieved from the user profile and reissued as 

10 if were just received from the user. During this second attempt, the required 
information can be retrieved from the user profile and the user's query executed 
without interruption (steps 84, 56). In the event that further secondary or additional 
information is required, the data solicitation procedure can repeat until the query is 
answerable or a failure condition is recognized. 

15 In addition to issuing queries to request information, a user can issue 

requests to perform maintenance of their profile. For example, a user can request that 
the system add a designated number of stock shares to their profile for tracking 
purposes. Profile maintenance commands can be identified through general natural 
language processing, such as query pattern matching, or can be identified through 

20 particular introductory key words, such as te PROFILE:", which indicates that the 
request is a profile update and not a general informational query. When a profile 
maintenance request is detected (step 86) the appropriate user profile is accessed (step 
88). The user profile is then updated in accordance with the user specification (step 
90). Finally a message indicating the success or failure of the update can be generated 
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and forwarded to the user (steps 92, 68, 70). 

Various other types of user queries may also be received in addition to 
those specified in Fig. 4. Other types of requests which can be processed in 
accordance with the present invention include, for example, a request to control a 
5 device connected to the Internet, a request to schedule a reminder, a request to send 
a message to a third party by a wireless messaging service, and a request to purchase 
particular goods or commodities. The specific implementation details are request- 
type dependent. The particular techniques and interface protocols required to process 
these types of requests will vary according to the implementation and platform 

10 technology. Various response techniques will be known to those of skill in the art and 
will therefore not be discussed further herein. 

Fig. 5 is an excerpt from a sample query pattern list which is written 
in a flow- chart style and which illustrates the association between particular queries 
and designated actions. For example, a first query pattern 100 can be of the form 

15 "Find <WHAT > in < CITYSTATE > " . If this query pattern is detected, the 
designated response (block 102) is to search for the identified "what" in the 
identified "citystate" using, for example, a yellow pages database. The results of 
the search are then processed by the presentation layer and output to the user. 

A second pattern 110 is of the form "Add < TICKERSYMBOL > to 

20 my portfolio" . When this query pattern is detected, the request is be interpreted as 
a profile maintenance request. As indicated at block 112, the designated response is 
to retrieve the ticker portfolio from the user's profile, add the specified stock ticker 
symbols to the portfolio, and save the result. The response 114 to the user is here 
designated as a listing of the contents of the updated portfolio. 
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Finally, a query can be of a generic informational request, such as the 
third pattern 120 "Who starred in < MOVIENAME > The associated action 
122 is to search a designated movie database to retrieve the stars of the specified 
movie. This information is then output as a response 124 to the user. As will be 
5 appreciated, once a sufficientiy complete query pattern list has been generated, a 
wide variety of common user requests can easily be processed without manual input. 
A query pattern list of this type can be implemented in a variety of fashions. In one 
embodiment, the query patterns are implemented as PERL regular expressions 
statements which are processed according to conventional techniques. In an 
10 alternative embodiment, the language processing routines are written in C (or a 
variant of C) using language processing algorithms known to those of skill in the 
art. 

As will be appreciated, during various interactions between users and 
the system, the user may be required to enter or review a relatively large amount of 

15 data. It may not be practical to implement this data access and retrieval through an 
instant messaging protocol. Thus, under particular circumstances, the system may 
establish a designated web page into which the data can be entered or from which 
the data can be retrieved. As shown in Fig. 2, the message server can then make 
the web page available to the user through over a conventional web server 36. 

20 It is desirable to provide some measure of security when 

communicating data in this fashion. Otherwise, an unauthorized user could gain 
access to a user's profile. According to a particular aspect of the invention, the 
system leverages the security which is provided when users are required to login to 
an IM system using a password to thereby provide at least authenticated access to a 
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designated web page. 

With reference to the flow chart of Fig. 6 and the block diagram of 
Fig. 7, when the server is acting to provide authenticated access to a particular web 
page, an access key is first generated. (Step 150). The access key preferably is a 
5 random number of sufficient length to make it difficult to deterrnine without access 
to the random number generator's starting seed. A uniform resource locator (URL) 
is then generated which includes the new access key and which is associated with 
the selected web page. (Step 152). The generated URL is then forwarded to the 
user using the instant messaging protocol. (Step 154). A table can be generated 

10 which associates a given key with a particular web page, such as shown in Fig. 7. 
When the server receives a request from a remote user to access a particular web 
page, the URL provided by the user in the request is processed to extract a received 
access key, (Step 156). The access key is then used to determine the particular web 
page which is associated with that key (step 158) and the user is allowed access to 

15 the designated page. (Step 160). 

By limiting the duration in which the key-web page association is 
valid, the likelihood of a third party intercepting the communication and accessing 
the identified web page is minimized. Further security can be provided by 
associating keys with particular users and allowing access to the associated page 

20 only if the key is returned by the user to which it was originally sent. Because the 
user is required to sign into the IM system, a user cannot access a web page through 
the server without first logging in through an IM network and thereby entering a 
user ID and password. 

Advantageously, this method of providing access to a particular web 
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page piggybacks on the security provided in the instant messaging login routine and 
provides some additional measure of security without requiring the user to provide 
their instant messaging password to the request processing system. In addition, 
further security can be provided by invalidating the key-web page association once a 
5 user has successfully accessed the page (within the designated time period). In this 
manner, only a single user can access a page. If hits from multiple users are 
detected during the key validity period, it can be assumed that the transmission 
security has been compromised and access denied to all users or appropriate 
alternative actions taken. 

10 Various different programmable computer hardware platforms can be 

used to implement the several aspects of the present invention. In a most preferred 
embodiment, the various components, such as message routers, dispatcher, query 
response servers, etc., are implemented on one or more computer systems which are 
substantially identical at the hardware and operating system level. This simplifies 

15 interactivity between the various systems and makes it simpler to port functionality 
from one computer to another to distribute the workload in accordance with, e.g., 
the number of computer systems available. The computers should be connectable to 
each other, for example, by means of 100Base-T Ethernet interfaces and 
corresponding 100Base-T Ethernet switches. At least one of the computers is 

20 connected to the data network. In the preferred Internet implementation, the 

connection is through a firewall and via a 100Base-T connection provided by a data 
center. In the most preferred implementation, each computer contains an a Intel 
L440GX+ motherboard, two Pentium III processors, 512 MB RAM, two Seagate 9 
GB disk drives, and operates using the Unix compatible Linux operating system. 
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As will be appreciated, the specific hardware utilized can be varied in accordance 
with need, required capacity, and the preferred programming and operating 
environment, as well as in response to other factors. 

The invention has been particularly shown and described with 
5 reference to the preferred embodiments thereof. It will be understood by those of 
skill in the art that various changes and additions to the method and system 
described above can be made without departing from the spirit and scope of the 
invention. 
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CLAIMS : 

1 1 . A method for interactively responding to queries from a 

2 remotely located user comprising the steps of: 

3 receiving a query from the user via a network in an instant messaging 

4 protocol; 

5 formulating an answer to the user's query; 

6 generating an output message containing the answer; and 

7 sending the output message to the user. 

1 2. The method of claim 1 , wherein the output message is sent to 

2 the user through the network in the instant messaging protocol. 

1 3 . The method of claim 1 , wherein the step of formulating an 

2 answer comprises: 

3 passing the query to a query response server; and 

4 receiving the answer from the query response server. 

1 4. The method of claim 3, further comprising the steps of: 

2 accessing a profile associated with the user from a profile database; 

3 and 

4 making at least a portion of the accessed profile available to the query 

5 response server. 



1 



5. The method of claim 4, further comprising the steps of, upon, 
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1 if no profile is available: 

2 creating a profile associated with the user; and 

3 storing the profile in the profile database. 

1 6. The method of claim 5, wherein the step of creating comprises 

2 the steps of: 

3 soliciting profile information from the user and storing profile 

4 information provided by the user in the profile. 

1 7. The method of claim 6, wherein the step of soliciting 

2 comprises sending the user a cross-reference message in the instant messaging 

3 protocol directing the user to a web page configured to receive user input. 

1 8. The method of claim 7, wherein the cross-reference message 

2 includes an embedded URL, the URL containing a key associated with the web 

3 page. 

1 9. The method of claim 1, further comprising the steps of: 

2 receiving a notification from the query response server requesting 

3 additional data; 

4 soliciting the requested additional data from the user; 

5 upon receipt of the additional data from the user, making the received 

6 additional data available to the query response server. 
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1 10. The method of claim 9, further comprising the step of saving 

2 the received additional data in a profile associated with the user. 

1 11. The method of claim 1, further comprising the steps of: 

2 receiving a notification from the query response server requesting 

3 additional data; 

4 accessing a profile associated with the user; 

5 extracting the requested additional data from the user; and 

6 making the additional data available to the query response server. 

1 12. The method of claim 11, further comprising the steps of, in 

2 the event that the requested additional data is not in the accessed profile; 

3 soliciting the requested additional data from the user; and 

4 saving the additional data in the profile. 

1 13. A method for interactively responding to requests from 

2 remotely located user comprising the steps of: 

3 receiving a message containing a request from the user via a network 

4 in an instant messaging protocol; 

5 parsing the message to extract the request; 

6 evaluating the request to identify at least one designated action 

7 suitable for mlfilling request; 

8 perforrning the at least one designated action; 

9 generating an output message containing results of the performance of 




WO 02/17101 PCTYUS01/23086 



26 

10 the designated action; and 

11 sending the output message to the user. 

1 14. The method of claim 13, wherein the output message is sent to 

2 the user through the network in the instant messaging protocol. 

1 15. The method of claim 13, wherein, in the event that the request 

2 is a query for information: 

3 the at least one designated action comprises passing the query to a 

4 query response server; and 

5 the results comprise an answer received from the query response 

6 server. 

1 16. The method of claim 13, further comprising the steps of: 

2 parsing the message to extract a user ID; 

3 accessing a profile associated with the user ID, the profile containing 

4 information; and 

5 making at least some of the information in the accessed profile 

6 available for use during at least one of the evaluating and performing steps. 

1 17. The method of claim 16, wherein, in the event that the request 

2 is a request for profile maintenance, the at least one designated action comprises 

3 accessing a user profile associated with the user and updating the user profile as 

4 specified in the request. 
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1 18, The method of claim 16, wherein the results comprise an 

2 indication regarding the success of the profile update. 

1 19. The method of claim 16, wherein the step of evaluating 

2 comprises: 

3 deternnmng if secondary information is required to fulfill the request; 

4 and 

5 accessing the user profile to retrieve the secondary information. 

1 20. The method of claim 19, wherein the step of evaluating 

2 further comprises, in the event that the secondary information is not in the user 

3 profile, soliciting the secondary information from the user. 

1 21 . The method of claim 20, further comprising the step of, upon 

2 receipt of the secondary information, saving the secondary information in the 

3 profile. 

1 22. A method of providing authenticated access to a web page 

2 comprising the steps of: 

3 establishing a communication link with a first user via a network 

4 using an instant messaging protocol; 

5 generating a new access key; 

6 creating a secret URL including the new access key; 
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7 associating the secret URL with a selected web page; and 

8 sending the secret URL to the first user in a message using the instant 

9 messaging protocol. 



23 . The method of claim 22, further comprising the steps of: 
receiving an access request from a second user using a hyper-text 
transfer protocol, the access request including a designated URL; 

parsing the designated URL to extract a received access key; 
identifying a designated web page associated with the received access 

key; and 

allowing access by the second user to the designated web page. 



1 24. The method of claim 23 , wherein the first user and the second 

2 user are the same. 

1 25. The method of claim 23, wherein the selected web page and 

2 the designated web page are the same. 

1 26. The method of claim 23, wherein the association between the 

2 new access key and the selected web page is valid only for a predetermined period 

3 of time. 

1 27. The method of claim 23, further comprising the step of 

2 invalidating the association between the new access key and the selected web page 



WO 02/17101 PCT/US01/23086 

29 

when the designated web page is the selected web page. 



1 28. The method of claim 23, further comprising the step of 

2 storing at least a portion of the secret URL in a profile associated with the first user, 

3 the portion including the new access key; 

4 the step of identifying comprising accessing a user profile associated 

5 with the second user; 

6 the step of allowing access comprising access by the second user to 

7 the designated web page only if the received access key is in the user profile 

8 associated with the second user. 

1 29. The method of claim 23, further comprising the steps of: 

2 storing the association between the new access key and the selected 

3 web page in a reference table; 

4 the step of identifying comprising accessing the reference table to 

5 retrieve the designated web page associated with the received access key. 

1 30. The method of claim 29, further comprising the steps of: 

2 associating the first user with the new access key; 

3 the step of allowing access comprising allowing access by the second 

4 user to the designated web page only if the second user is associated with the 

5 received access key. 



1 



31. 



A system for interactively responding to queries from a 
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1 remotely located user comprising: 

2 a message processor connected to an instant messaging service via a 

3 data network; 

4 the message processor configured to: 

5 receiving an instant message query from the user; 

6 formulate an answer to the user' s query; 

7 generate an output message containing the answer; and 

8 send the output message to the user. 

1 32. The system of claim 3 1 , wherein the message processor is 

2 further configured to send the output message to the user as an instant message via 

3 the network. 

1 33 . The system of claim 3 1 , wherein the message processor is 

2 connected to a query response server, the message processor being configured to 

3 formulate an answer by passing the query to the query response server and receiving 

4 the answer from the query response server. 

1 34, The system of claim 33, further comprising a user profile 

2 database containing information associated with a plurality of users; 

3 the message processor being configured to access a profile associated 

4 with the user from the profile database and make at least a portion of the accessed 

5 profile available to the query response server during answer formulation. 
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1 35 . The system of claim 33, wherein the message processor is 

2 configured to, if no profile is available, create a profile associated with the user and 

3 store the profile in the profile database. 



1 36. The system of claim 35, wherein the message processor is 

2 configured to create a profile by soliciting profile information from the user and 

3 storing profile information provided by the user in the profile. 

1 37. The system of claim 35, wherein the message processor is 

2 configured to solicit profile information by sending the user an instant message 

3 containing a cross-reference link directing the user to a web page configured to 

4 receive user input. 

1 38. The system of claim 37, wherein the cross-reference link 

2 includes an embedded URL, the URL containing a key associated with the web 

3 page. 

1 39. The system of claim 31, wherein the message processor is 

2 configured to: 

3 receive a notification from the query response server requesting 

4 additional data; 

5 solicit the requested additional data from the user in response to the 

6 receipt of an additional data notification; and 

7 make received additional data available to the query response server. 
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1 40. The system of claim 39, wherein the message processor is 

2 configured to save the received additional data in a profile associated with the user. 



1 41 . The system of claim 3 1 , wherein the message processor is 

2 further configured to: 

3 receive a notification from the query response server requesting 

4 additional data; 

5 access a profile associated with the user; 

6 extract the requested additional data from the user; and 

7 make the additional data available to the query response server. 



1 42. The system of claim 41, wherein the message server is 

2 configured to, if the requested additional data is not in the accessed profile, solicit 

3 the requested additional data from the user and save the additional data in the 

4 profile. 



1 43. A system for interactively responding to requests from 

2 remotely located user comprising: 

3 a message processor connected to an instant messaging service via a 

4 data network; 

5 the message processor configured to: 

6 receive a instant message containing a request from the user 

7 via the network; 
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8 parse the message to extract the request; 

9 evaluate the request to identify at least one designated action 

10 suitable for fulfilling request; 

1 1 perform the at least one designated action; 

12 generate an output message containing results of the 

13 performance of the designated action; and 

14 send the output message to the user. 



1 44. The system of claim 43, wherein the message processor is 

2 configured to send the output message to the as an instant messaging. 

1 45, The system of claim 43, wherein the message processor is 

2 configured to respond to a query for information by passing the query to a query 

3 response server and receiving an answer from the query response server. 

1 46. The system of claim 43 , further comprising a user profile 

2 database; 

3 the message processor being further configured to: 

4 parse the message to extract a user screen name; 

5 access a profile associated with the user ID, the profile 

6 containing information; and 

7 make at least some of the information in the accessed profile 

8 available for use during request evaluation and action performance. 
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1 47. The system of claim 46, wherein the processor is configured 

2 to respond to a profile maintenance request by accessing a user profile associated 

3 with the user and updating the user profile as specified in the request. 

1 48. The system of claim 46, wherein the message processor is 

2 configured to determine if secondary information is required to fulfill the request 

3 and, if so, access the user profile to retrieve the secondary information. 

1 49. The system of claim 48, wherein the step message processor 

2 is further configured to solicit the secondary information from the user if the 

3 secondary information is not in the user profile. 

1 50. The system of claim 49, wherein the message processor is 

2 configured to save received secondary information in the user profile. 

1 51 . A system for providing authenticated access to a web page 

2 comprising: 

3 an instant messaging server connected to an instant messaging 

4 network via a network; 

5 a web server connected to the network; and 

6 a key-web page association table indicating an association between a 

7 specific key and a designated URL; 

8 the instant messaging server configured to, in response to a 

9 detennination that a user is to be granted authenticated access to a selected web 
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10 page: 

1 1 generate a new access key; 

12 create a secret URL including the new access key; 

13 associate the secret URL with the selected web page in the 

14 key-web page association table; and 

15 send the secret URL to the first user in a instant message; 

16 the web server configured to, in response to the receipt of a web-page 

17 access request from a second user, the access request including a designated URL: 

18 parse the designated URL to extract a received access key; 

19 identify a designated web page associated with the received 

20 access key in accordance with data in the key- web page association table; and 

21 serve the designated web page to the second user. 

1 52. The system of claim 5 1 , wherein the association between the 

2 new access key and the selected web page is valid only for a predetermined period 

3 of time. 



1 



2 



3 



53. The system of claim 51 , wherein the web server is configured 
to invalidate the association between the new access key and the selected web page 
when the designated web page is the selected web page. 




WO 02/17101 PCT/US01/23086 

36 

AMENDED CLAIMS 
[received by the International Bureau on 1 3 November 2001 ( 1 3. 1 1 .0 1 ); 
original claims I, 2, 9, 1 1, 13, 14, 31, 32, 43, 44, 46 and 49 amended; ' 
remaining claims unchanged (7 pages)] 



1 1 . A method for interactively responding to queries from a user logged in 

2 to an instant messaging network, comprising the steps of: 

3 logging a message processor in to the instant messaging network under a first 

4 screen-name, the user having the first screen-name as an authorized partner and being advised 

5 by the instant messaging network of the presence of the message processor; 

6 receiving a query addressed to the first screen-name from the user via the 

7 instant messaging network in an instant messaging protocol; 

8 formulating an answer to the user's query; 

9 generating an output message contdning the answer; and 

10 sending the output message to the user via the instant messaging network. 

1 2. The method of claim 1, wherein the output message is sent to the user 

2 through the instant messaging network in the instant messaging protocol. 

1 3. The method of claim 1, wherein the step of formulating an answer 

2 comprises: 

3 passing the query to a query response server; and 

4 receiving the answer from the query response server. 
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1 9. The method of claim 3, further comprising the steps of: 

2 receiving a notification from the query response server requesting additional 

3 data; 

4 soliciting the requested additional data from the user; 

5 upon receipt of the additional data from the user, making the received 

6 additional data available to the query response server. 

1 10. The method of claim 9, further comprising the step of saving the 

2 received additional data in a profile associated with the user. 

1 11. The method of claim 3, further comprising the steps of; 

2 receiving a notification from the query response server requesting additional 

3 data; 

4 accessing a profile associated with the user; 

5 extracting the requested additional data from the user; and 

6 making the additional data available to the query response server. 

1 12. The method of claim 1 1 , further comprising the steps of, in the event 

2 that the requested additional data is not in the accessed profile: 

3 soliciting the requested additional data from the user; and 

4 saving the additional data in the profile. 
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1 1 3 . A method for interactively responding to requests from a user logged in 

2 to an instant messaging network, comprising the steps of: 

3 logging a message processor in to the instant messaging network under a first 

4 screen-name, the user having the first screen-name as an authorized partner and being advised 

5 by the instant messaging network of the presence of the message processor; 

6 receiving a message addressed to the first screen-name containing a request 

7 from the user via the instant messaging network in an instant messaging protocol; 

8 parsing the message to extract the request; 

9 evaluating the request to identify at least one designated action suitable for 

10 fulfilling request; 

1 1 perfonriing the at least one designated action; 

12 generating an output message containing results of the performance of the 

13 designated action; and 

14 sending the output message to the user via the instant messaging network. 

1 14. The method of claim 13, wherein the output message is sent to the 

2 user through the instant messaging network in the instant messaging protocol. 

1 15. The method of claim 13, wherein, in the event that the request is a 

2 query for information: 

3 the at least one designated action comprises passing the query to a query 

4 response server; and 

5 the results comprise an answer received from the query response server. 
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1 30. The method of claim 29, further comprising the steps of: 

2 associating the first user with the new access key; 

3 the step of allowing access comprising allowing access by the second user to 

4 the designated web page only if the second user is associated with the received access key. 

1 3 1 . A system for interactively responding to queries from a user logged in 

2 to an instant messaging service via an instant messaging network, comprising: 

3 a message processor logged in to the instant messaging service under a first 

4 screen-name via the instant messaging network, the user having the first screen-name as an 

5 authorized partner and being advised by the instant messaging service of the presence of the 

6 message processor; 

7 the message processor configured to: 

8 receive an instant message query addressed to the first screen-name 

9 from the user; 

10 formulate an answer to the user's query; 

1 1 generate an output message containing the answer; and 

12 send the output message to the user via the instant messaging network. 

1 32. The system of claim 3 1 , wherein the message processor is further 

2 configured to send the output message to the user in an instant message protocol via the 

3 network. 
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42. The system of claim 41, wherein the message server is configured to, if 
the requested additional data is not in the accessed profile, solicit the requested additional 
data from the user and save the additional data in the profile. 

43 . A system for interactively responding to requests from a user logged in 
to an instant messaging network, comprising: 

a message processor logged in to the instant messaging service under a first 
screen-name via the instant messaging network, the user having the first screen-name as an 
authorized partner and being advised by the instant messaging service of the presence of the 
message processor; 

the message processor configured to: 

receive an instant message addressed to the first screen-name 
containing a request from the user via the instant messaging network; 

parse the message to extract the request; 

evaluate the request to identify at least one designated action suitable 

for fulfilling request; 

perform the at least one designated action; 

generate an output message containing results of the performance of 
the designated action; and 

send the output message to the user via the instant messaging network. 
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1 44. The system of claim 43, wherein the message processor is configured 

2 to send the output message to the user in an instant message protocol. 

1 45. The system of claim 43, wherein the message processor is configured 

2 to respond to a query for information by passing the query to a query response server and 

3 receiving an answer from the query response server. 

1 46. The system of claim 43, further comprising a user profile database; 

2 the message processor being further configured to : 

3 parse the message to extract a user ID; 

4 access a profile associated with the user ID, the profile containing 

5 information; and 

6 make at least some of the information in the accessed profile available 

7 for use during request evaluation and action performance. 

1 47. The system of claim 46, wherein the processor is configured to respond 

2 to a profile maintenance request by accessing a user profile associated with the user and 

3 updating the user profile as specified in the request. 

1 48. The system of claim 46, wherein the message processor is configured 

2 to determine if secondary information is required to fulfill the request and, if so, access the 

3 user profile to retrieve the secondary information. 
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1 49. The system of claim 48, wherein the message processor is further 

2 configured to solicit the secondary information from the user if the secondary information is 

3 not in the user profile. 

1 50. The system of claim 49, wherein the message processor is configured 

2 to save received secondary information in the user profile, 

1 5 1 . A system for providing authenticated access to a web page comprising: 

2 an instant messaging server connected to an instant messaging network via a 

3 network; 

4 a web server connected to the network; and 

5 a key-web page association table indicating an association between a specific 

6 key and a designated URL; 

7 the instant messaging server configured to, in response to a determination that 

8 a user is to be granted authenticated access to a selected web page: 

9 generate a new access key; 

10 create a secret URL including the new access key; 

1 1 associate the secret URL with the selected web page in the key-web 

12 page association table; and 

1 3 send the secret URL to the first user in a instant message; 

1 4 the web server configured to, in response to the receipt of a web-page access 

15 request from a second user, the access request including a designated URL: 

1 6 parse the designated URL to extract a received access key; 

17 identify a designated web page associated with the received access key 
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